2025 CVE Vulnerabilities
45,280 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-47499 | MEDIUM | 6.5 | 0.2% | May 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple ... |
| CVE-2025-47498 | HIGH | 7.5 | 0.6% | May 7, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-47497 | MEDIUM | 6.5 | 0.2% | May 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Logo S... |
| CVE-2025-47496 | HIGH | 7.5 | 0.6% | May 7, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-47495 | MEDIUM | 6.5 | 0.2% | May 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blockspare Blocksp... |
| CVE-2025-47494 | HIGH | 7.5 | 0.6% | May 7, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-47493 | MEDIUM | 6.5 | 0.3% | May 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ultimate Blocks Ul... |
| CVE-2025-47491 | HIGH | 7.4 | 0.2% | May 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Si... |
| CVE-2025-47490 | HIGH | 8.5 | 0.3% | May 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rustaurius Ultimat... |
| CVE-2025-47489 | MEDIUM | 6.5 | 0.2% | May 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markkinchin Beds24... |
| CVE-2025-47488 | MEDIUM | 6.5 | 0.3% | May 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Pa... |
| CVE-2025-47486 | MEDIUM | 5.3 | 0.3% | May 7, 2025 | Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Accessing Functionality Not... |
| CVE-2025-47485 | MEDIUM | 5.3 | 0.3% | May 7, 2025 | Missing Authorization vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Acces... |
| CVE-2025-47484 | MEDIUM | 6.4 | 0.2% | May 7, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Oliver Campion Display Remote Posts Block display-remote-posts-block... |
| CVE-2025-47483 | MEDIUM | 4.9 | 0.2% | May 7, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Iulia Cazan Easy Replace Image easy-replace-image allows Server Side... |
| CVE-2025-47482 | MEDIUM | 6.5 | 0.2% | May 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT S... |
| CVE-2025-47481 | MEDIUM | 5.3 | 0.3% | May 7, 2025 | Improper Control of Generation of Code ('Code Injection') vulnerability in GS Plugins GS Testimonial Slider gs-testimoni... |
| CVE-2025-47480 | MEDIUM | 5.4 | 0.3% | May 7, 2025 | Missing Authorization vulnerability in Iqonic Design Graphina graphina-elementor-charts-and-graphs allows Exploiting Inc... |
| CVE-2025-47476 | MEDIUM | 6.5 | 0.2% | May 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org Cost C... |
| CVE-2025-47475 | MEDIUM | 6.5 | 0.3% | May 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artbees JupiterX C... |
| CVE-2025-47473 | MEDIUM | 5.4 | 0.1% | May 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in pimwick PW WooCommerce Bulk Edit pw-bulk-edit allows Cross Site Reque... |
| CVE-2025-47472 | MEDIUM | 5.4 | 0.3% | May 7, 2025 | Missing Authorization vulnerability in codepeople Music Player for WooCommerce music-player-for-woocommerce allows Explo... |
| CVE-2025-47471 | MEDIUM | 4.3 | 0.2% | May 7, 2025 | Missing Authorization vulnerability in EnvoThemes Envo Extra envo-extra allows Exploiting Incorrectly Configured Access ... |
| CVE-2025-47470 | MEDIUM | 4.3 | 0.1% | May 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in senols GPT3 AI Content Writer gpt3-ai-content-generator allows Cross ... |
| CVE-2025-47469 | MEDIUM | 5.4 | 0.3% | May 7, 2025 | Missing Authorization vulnerability in slui Media Hygiene media-hygiene allows Exploiting Incorrectly Configured Access ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now